Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
183s -
max time network
312s -
platform
windows11-21h2_x64 -
resource
win11-20240426-en -
resource tags
-
submitted
30/04/2024, 16:14
General
-
Target
Vanta.zip
-
Size
66KB
-
MD5
365ec42fb280de0735990095182e7e84
-
SHA1
6e64ecac43849d9c6cbfad0b41d16e8c26e29752
-
SHA256
3acf3a6cf0e3b5a83e56b562becffdae8ae5c91d0b33d333b191e248e8b1310d
-
SHA512
bd99c0e1954f2068d707983aa06c1429c6400ae5e53e80ba76554875753335eb2f1f9d55450e45ae3719f3caa6887ad0cf93ba077af66fd351526836452f42e3
-
SSDEEP
1536:ANbpjuef59j7k63wQ4bW5I7oh6W5JGadn8Pr6/:cVjuebDGbWp66J/aPW/
Malware Config
Signatures
-
Modifies registry class 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Vanta.zip1⤵
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD5394f971f95da279c2ebf1a4113ce8426
SHA174f73a16920c5919ccb7788e3c2429c291da34d3
SHA2565555d03ce11acdeae26b199b7bdf7220be2f8a4668800c29644740857576659f
SHA5121ea93d43096e70a182b4a5011b20b2a0c3558b907039c8ead7c3f89cc360b8ee635789b15398ef42f6a0c74a98d9f070290d5e98f786017e4d6bc3e25a042f33
-
Filesize
10KB
MD5643bd05d5a2a61cea15ca384ef728d9b
SHA1d263a46373da09b1d7c20e3c607016b7b221311e
SHA256f0d07235fe5aeb9fe463bf0e1fa7b50c53768763ea61840aead602fb076a9525
SHA512fc004b28c3eaa9cbda9b7eb94179148aa97279e18112b737dd049eb5d21015e140a321c0000f7d97307bf45193ac68109f411249a849c46ed060c362fbc773ce